Recommended Mitigation
Review your bucket ACL and policies. If the bucket is not supposed to be publicly accessible, limit the access control list and/or the bucket policy to be privately accessible only. The combination of ACL and policies should be carefully selected and it's preferred to use policies when possible. For more information about ACL see: <a href="https://www.alibabacloud.com/help/doc-detail/100676.html" target="_blank" rel="noopener noreferrer">https://www.alibabacloud.com/help/doc-detail/100676.html</a> For more information about policies see: <a href="https://www.alibabacloud.com/help/en/doc-detail/101681.html" target="_blank" rel="noopener noreferrer">https://www.alibabacloud.com/help/en/doc-detail/101681.html</a>